Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          J/ab/rgT4bSdcHWL/qPL173yaUZIvi0QBhH2lpPjJBs=
Subject key identifier:   E5:AA:15:3A:F4:EE:25:7B:DD:FB:36:96:B8:3E:A8:45:44:E1:1D:50
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       019E303B6551685C8D96C15BAD65C76E346C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          0704
Signing time:             Sat 16 May 2026 10:00:59 +0000
Manifest this update:     Sat 16 May 2026 10:00:59 +0000
Manifest next update:     Sun 17 May 2026 10:00:59 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: FX7kdKpt+WoTPfrfE4X3sqdPwJrX81ry1p5rYGfphoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:65:51:68:5c:8d:96:c1:5b:ad:65:c7:6e:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: May 16 10:00:59 2026 GMT
            Not After : May 17 10:00:59 2026 GMT
        Subject: CN=e5aa153af4ee257bddfb3696b83ea84544e11d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:51:d4:4a:9e:75:79:93:a5:0f:61:ca:a1:
                    34:93:3b:64:fc:88:20:bf:bb:aa:15:58:42:26:be:
                    a6:4f:e7:60:c2:da:18:0a:44:3f:b4:a6:12:c8:fd:
                    0f:7e:1d:28:2d:89:ac:04:46:44:13:39:5b:5d:4d:
                    bb:0c:ff:5e:3c:dd:34:3e:67:95:79:5d:f1:19:09:
                    cd:01:55:b9:db:f2:6a:cf:9b:97:92:49:99:47:3f:
                    58:a9:1b:57:33:8e:1e:91:e2:32:fa:c2:0b:fa:21:
                    b0:49:ef:2e:06:ea:98:e6:a8:8f:27:97:9d:ac:4c:
                    bf:a0:a5:10:bc:27:83:50:83:4b:14:87:cb:6e:76:
                    1e:73:87:a8:22:9a:ee:30:56:30:25:ad:fe:df:19:
                    3b:aa:1b:0a:74:53:28:c9:a6:c0:e8:c8:da:f4:7b:
                    3f:3c:da:60:40:2d:c9:26:cb:f0:28:b6:ce:e9:9f:
                    de:4c:21:53:2b:f4:b5:76:c7:ae:d8:92:d1:e1:32:
                    55:42:91:c3:c8:a5:65:7d:fc:2f:e1:32:bd:4e:e1:
                    c8:35:42:b2:a6:cc:6c:02:e5:65:8b:22:be:24:c2:
                    a5:e0:cb:3e:9e:9c:2d:ea:c1:23:93:1d:d1:58:36:
                    e7:65:85:12:d0:64:68:a1:9d:94:8b:fd:56:c4:c0:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:15:3A:F4:EE:25:7B:DD:FB:36:96:B8:3E:A8:45:44:E1:1D:50
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:52:b8:91:e7:89:bf:b4:50:ae:0a:27:df:8a:b1:06:e2:9f:
         3b:fd:eb:05:4e:bc:04:7e:e2:15:6b:88:b5:6f:1b:d7:bd:77:
         d6:32:77:28:19:2b:c6:87:bd:dd:4b:11:d3:4c:6e:4c:f9:ed:
         27:a3:76:0a:6c:58:e8:e3:8e:58:0b:9e:bb:b0:06:da:7f:88:
         9f:df:47:84:8d:88:26:88:bc:c1:48:29:d7:04:2e:c3:b3:16:
         ad:b5:9d:84:85:2a:4a:af:47:58:16:c9:c2:1c:85:0e:f9:f0:
         4c:e8:c2:3f:dc:84:51:26:0c:d3:77:f4:d1:ac:b3:69:4c:03:
         86:a3:c9:3f:3b:88:8b:a6:96:15:60:56:6e:e8:e8:6e:17:13:
         b0:e0:e6:f8:23:ec:77:0b:c8:50:14:c9:0f:2a:4d:5c:0b:54:
         51:25:b9:6a:20:7d:7c:b6:74:82:c6:1f:de:19:a9:09:53:d8:
         d5:4f:f6:a0:51:03:55:28:dc:39:69:ef:30:d2:24:06:c9:9e:
         a5:a1:fd:21:8b:c6:fe:5b:79:d1:21:d1:63:04:9b:8f:d9:fc:
         71:98:3c:72:bb:ec:db:e7:0a:9f:e5:88:13:88:6d:55:ba:b4:
         d2:ed:09:94:f0:1e:97:10:d6:b5:a2:0d:5e:b1:78:be:0d:3c:
         aa:01:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:58 2026 by rpki-client